The Foundational Application Security Training (FAST) course is an 8-hour class focused on explaining the fundamentals of applications and their security.

This lecture-focused class is designed to allow managers, product owners, support staff and non-developers to understand application security. This lecture includes what makes up the various modern application technologies, the application development process, what vulnerabilities and risks are exposed via applications and how the attacks happen.

This course will enable organizations to improve how they focus on application security while continuing to increase the coordination between the various teams including development, project management, product owners, IT, and security. Attendees will be able to understand and explain the various risks and controls within a secure modern application environment.

Introduction – Why focus on Application Security?
Security Foundation
- CIA
- Identity and Access Management
- Security Controls
Security by Design Principles
Design best practices to build secure software
Securing the dev lifecycle
- Waterfall vs Agile
Testing tools
OWASP® Top 10 Vulnerabilities
Definitions and risk discussion
Web Penetration Testing
- Scoping
- Prepping
- Testing Methodology
- Reporting

On Demand Training

Train at your own pace with no set course schedule
Access to all course resources, including slides and VMs
Subject Matter Expert support through Discord
Tips, tools, and techniques that can be applied immediately upon returning to work
Strengthen your skills by solving challenges within the Antisyphon Cyber Range
Become part of a community driven to educate and share knowledge